ivre / masscanned

Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Bug in TCP protocol parsers

Frky opened this issue · comments

commented

State of FSM is not currently stored in TCB structure, which means it is lost between each packets.

Hence, for instance, parsing a HTTP request received in two different TCP packets (same TCP connection) fails.